This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json) Hash identifier: JG8HN1+8dhIRpAATH870/Rm6jpEDGie6NYizSgbDhgI= Subject key identifier: 67:9E:A4:33:2B:26:68:5E:36:99:5E:6D:DF:E1:9A:1F:97:E9:20:CC Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0 Certificate serial: 019B2174D726F23D6BB236DE92A5AF687F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft Manifest number: 0A0E Signing time: Mon 15 Dec 2025 10:01:03 +0000 Manifest this update: Mon 15 Dec 2025 10:01:03 +0000 Manifest next update: Tue 16 Dec 2025 10:01:03 +0000 Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: 44pmBkc+6Gf2fHOJA7EssxyjsL7ysAfLUCyqdQaEIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:d7:26:f2:3d:6b:b2:36:de:92:a5:af:68:7f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0 Validity Not Before: Dec 15 10:01:03 2025 GMT Not After : Dec 16 10:01:03 2025 GMT Subject: CN=679ea4332b26685e36995e6ddfe19a1f97e920cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:16:55:43:70:e4:4b:70:e5:54:85:08:f1: e5:24:95:e2:2b:96:6a:d5:f9:c4:b6:6e:69:08:d6: a0:1c:44:c1:fd:c7:7f:92:23:07:02:6e:70:9c:bd: fe:c6:5f:4b:ac:92:ac:97:48:8f:1e:7f:5d:ea:32: 2d:42:48:09:23:cf:92:17:9d:a1:4a:b4:c5:04:5d: d4:7a:b5:bf:d5:22:df:2c:63:b5:6c:57:a1:70:33: de:bf:44:0f:70:70:0a:e5:14:d5:a7:2d:69:79:ff: df:52:bf:08:79:1f:64:fc:c2:13:3f:32:b7:ee:e0: b7:30:13:29:75:ad:32:d2:b3:7c:31:9c:06:e4:52: fc:78:52:4f:e5:65:ed:6c:07:16:68:90:92:f4:91: 4e:50:f1:27:6b:8a:91:a4:b7:82:e4:c3:86:74:3b: 6c:30:3c:a5:bf:7c:d6:89:26:a0:72:35:93:1c:b9: 6e:46:ab:40:24:8d:0c:08:e4:f9:df:b6:1e:58:a5: 04:3b:a9:02:ed:28:f3:d0:ca:41:a8:38:28:5f:f8: 7b:38:db:07:01:24:63:3b:22:4b:f3:59:1f:e7:6c: 65:74:4b:d2:03:35:01:72:04:cd:4a:c9:7f:b6:84: c5:1b:fe:4b:4d:25:b8:de:f4:5a:ab:5f:75:0b:fa: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:A4:33:2B:26:68:5E:36:99:5E:6D:DF:E1:9A:1F:97:E9:20:CC X509v3 Authority Key Identifier: keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f4:07:fc:24:f7:15:36:ca:d4:0f:f0:eb:f7:6c:80:8d:e3: 47:1b:0d:33:23:38:ba:89:48:c7:d3:7a:29:0f:31:1f:c7:1d: f1:3f:63:d2:ba:91:c7:50:10:b2:d8:85:54:59:8f:78:4b:9f: 15:3e:c1:ad:1a:41:e4:90:09:3e:30:46:91:b3:a4:fe:a3:ae: 77:da:1e:4a:9e:f6:bb:4d:ed:ec:da:d3:50:da:ca:f1:05:a6: 7b:ab:b7:07:1c:e2:61:5f:eb:f2:61:4d:a0:a2:7c:35:37:fd: 12:f5:bc:df:0f:3f:b1:4b:bc:3e:30:7c:c2:93:6d:df:88:85: 42:23:06:2f:b0:dd:cd:d3:3b:ac:c3:56:b7:74:3f:dd:64:93: 7c:ea:2c:49:c7:ce:6e:2c:e8:ba:76:c9:5a:e7:de:79:ed:e9: 2f:aa:37:85:cc:a8:92:f0:7e:18:5c:2f:56:e5:c1:c5:d1:be: b7:c2:69:df:61:b9:a1:41:ac:83:53:d1:62:00:cd:8b:7e:c2: d8:84:53:45:84:80:72:4e:fb:9e:6c:3b:15:73:0d:13:e3:a1: da:e1:0a:aa:f0:16:a5:aa:8f:dc:cf:c4:91:18:02:b1:60:d4: be:e1:4d:96:37:89:00:a6:13:33:94:09:5b:0c:bd:1a:82:a6: 04:64:b6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdNcm8j1rsjbekqWvaH8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1 Mjk5ZDAwHhcNMjUxMjE1MTAwMTAzWhcNMjUxMjE2MTAwMTAzWjAzMTEwLwYDVQQD Eyg2NzllYTQzMzJiMjY2ODVlMzY5OTVlNmRkZmUxOWExZjk3ZTkyMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYWVUNw5Etw5VSFCPHlJJXiK5Zq 1fnEtm5pCNagHETB/cd/kiMHAm5wnL3+xl9LrJKsl0iPHn9d6jItQkgJI8+SF52h SrTFBF3UerW/1SLfLGO1bFehcDPev0QPcHAK5RTVpy1pef/fUr8IeR9k/MITPzK3 7uC3MBMpda0y0rN8MZwG5FL8eFJP5WXtbAcWaJCS9JFOUPEna4qRpLeC5MOGdDts MDylv3zWiSagcjWTHLluRqtAJI0MCOT537YeWKUEO6kC7Sjz0MpBqDgoX/h7ONsH ASRjOyJL81kf52xldEvSAzUBcgTNSsl/toTFG/5LTSW43vRaq191C/rP5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeepDMrJmheNplebd/hmh+X6SDMMB8GA1UdIwQY MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0 LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPQH/CT3 FTbK1A/w6/dsgI3jRxsNMyM4uolIx9N6KQ8xH8cd8T9j0rqRx1AQstiFVFmPeEuf FT7BrRpB5JAJPjBGkbOk/qOud9oeSp72u03t7NrTUNrK8QWme6u3BxziYV/r8mFN oKJ8NTf9EvW83w8/sUu8PjB8wpNt34iFQiMGL7DdzdM7rMNWt3Q/3WSTfOosScfO bizounbJWufeee3pL6o3hcyokvB+GFwvVuXBxdG+t8Jp32G5oUGsg1PRYgDNi37C 2IRTRYSAck77nmw7FXMNE+Oh2uEKqvAWpaqP3M/EkRgCsWDUvuFNljeJAKYTM5QJ Wwy9GoKmBGS21Q== -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:21 2025 by rpki-client